CyberEssentials

UK baseline technical controls for reducing common cyber threats.

Cyber Essentials is a UK technical standard that defines a minimum set of controls for basic cyber hygiene. It focuses on device configuration, patching, user access and boundary protection.

It is practical but limited in scope. Implementing it highlights gaps in patch management, asset inventory and change control, and certification requires evidence and ongoing maintenance.

Cyber Essentials — access, authentication and privileged controls

Specifies baseline controls for restricting access, enforcing authentication and managing privileged accounts to reduce common attack vectors.

Heimdal Next-Gen Antivirus

Provides real-time malware detection and blocking as an endpoint security control to reduce infections.

WALLIX PAM

Centralises privileged credential storage, session brokering and recording to control administrative access.

PAM360

Manages privileged accounts, automates password rotation and records sessions for privileged control.

WALLIX One

Discovers and controls privileged accounts and records activity to enforce privileged access policies.

Specops Password Policy

Enforces password complexity, banned lists and breached-password checks for stronger authentication.

Heimdal Ransomware Encryption Protection

Detects and blocks unauthorised file encryption to stop ransomware and protect endpoint data integrity.

Heimdal Unified Security Platform

Combines endpoint threat prevention and update management to enforce security controls on devices.

AD360

Centralises authentication, multi-factor and access controls across Active Directory and Azure AD.

ADManager Plus

Provides delegated administration and role-based controls to enforce access restrictions and separation.

Specops uReset

Provides self-service password reset with secondary verification to secure account recovery workflows.

ADSelfService Plus

Offers self-service reset, multi-factor and single sign-on to strengthen authentication and reduce risk.

uniqkey

Provides an encrypted credential vault and centralised sharing controls to secure organisational passwords.

Cyber Essentials — audit evidence

Collected logs, reports and records that demonstrate controls meet Cyber Essentials requirements and support audit review.

ADAudit Plus

Records logons, object changes and file access to provide searchable audit trails for compliance.

NetWrix Auditor

Collects and retains tamper-evident configuration and activity logs to supply audit evidence.

ADManager Plus

Produces directory and compliance reports and stores records to support audit and regulatory review.

CyberSmart

Generates records, device checks and training evidence to support audits and demonstrate compliance.

M365 Manager Plus

Collects activity and configuration data across Microsoft 365 to produce audit reports for compliance.

Cyber Essentials: governance, oversight and accountability

Provides baseline controls to support oversight, policy enforcement and evidence for compliance and risk management.

Patch Manager Plus

Automates discovery, testing and deployment of OS and application patches to enforce patching policy.

Heimdal Patch and Asset Management

Automates patch deployment and inventories assets to demonstrate and enforce patching compliance.

CyberSmart

Manages essential security controls, policies and guidance to help organisations meet baseline standards.

Endpoint Central

Centralises endpoint patching, configuration and security controls to enforce device compliance policies.

Patch Connect Plus

Integrates third-party updates into WSUS/SCCM to enable consistent patch policy enforcement across systems.

Where CyberEssentials fits

The standard maps to endpoints, firewalls, email gateways and cloud service configurations. Those components need consistent settings and inventories to make the controls effective.

Treat Cyber Essentials as a baseline technical standard when planning controls or checking suppliers. It does not replace a wider risk assessment or higher assurance requirements.

Discuss your CyberEssentials implementation

Speak to a specialist